CVE-2022-28550

Name of the Vulnerable Software and Affected Versions Matthias-Wandel/jhead version 3.06

Description The issue arises from jhead copying strings to a stack buffer when it detects a &i or &o, without checking the boundary of the stack buffer. This results in a stack buffer overflow problem when multiple &i or &o are given. The problem is related to the shellescape() function in jhead.c.

Recommendations For version 3.06, consider avoiding the use of multiple &i or &o to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.